Chaos Engineering Platform · View 08 of 21 · Structure
Decisions
- Every left-hand system is read-only. The platform consumes the inventory it does not own, and a stale read blocks a run rather than degrading it silently.
- The incident feed is an input with veto power, not an advisory: an open incident of configured severity suspends injection without a human deciding.
- Run state transitions go out on a durable topic, so the incident platform, the catalogue and reporting all read the same events rather than polling the API.
Assumptions
- Service inventory and dependency graph no older than 24 hours, enforced as a hard block rather than a warning.
- Pre-run notification 10 minutes ahead for scheduled runs, immediate for ad-hoc.
Accepted clutter
- Four route-check warnings remain on this page: with five satellites a side, adjacent edge labels sit close. Shortening them further would cost meaning.